CNNVD-202510-2496 Information
Oct 17, 2025
cve
CNNVD ID
CNNVD-202510-2496
Related CVE
- CNNVD Published: 2025-10-17
Description (Chinese)
Flowring Agentflow是中国华苓（Flowring）公司的一个智能流程自动化(RPA)平台。 Flowring Agentflow存在安全漏洞，该漏洞源于允许未经身份验证的远程攻击者利用相对路径遍历下载任意系统文件。
Description (English)
Flowring Agentflow is an intelligent process automation (RPA) platform for Flowring China. Flowring Agentflow has a security loophole, which stems from allowing remote assailants without identification to use relative paths to download any system file.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
华苓
Published
2025-10-17
Last Modified
2026-02-24
References
https://www.twcert.org.tw/en/cp-139-10439-0bd15-2.html https://www.twcert.org.tw/tw/cp-132-10438-1173e-1.html
Patch
https://www.flowring.com/agentflow/
Share on: